Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/102455 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1040138 | Third Party Advisory VDB Entry |
https://www.symantec.com/security-center/network-protection-security-advisories/SA155 | Vendor Advisory |
http://www.securityfocus.com/bid/102455 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1040138 | Third Party Advisory VDB Entry |
https://www.symantec.com/security-center/network-protection-security-advisories/SA155 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
21 Nov 2024, 03:00
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/102455 - Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id/1040138 - Third Party Advisory, VDB Entry | |
References | () https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - Vendor Advisory |
Information
Published : 2017-05-11 14:30
Updated : 2024-11-21 03:00
NVD link : CVE-2016-9099
Mitre link : CVE-2016-9099
CVE.ORG link : CVE-2016-9099
JSON object : View
Products Affected
broadcom
- symantec_proxysg
- advanced_secure_gateway
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')